CrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 13142
events: 11
created_at ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 13142
events: 11
created_at: 2026-10-29T14:22:06Z
message: Ip 34.18.171.186 performed 'crowdsecurity/http-probing' (11 events over 1.395913732s) at 2026-10-29 14:22:06.14536005 +0000 UTC
target_uri: ["/.git/config","/.env","/.env.local","/.env.production","/.env.staging","/.env.development","/.env.test","/.env.remote","/.env.bak","/.env.backup","/.env.save"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"]
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-41773
alert_id: 13135
events: 1
crea ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-41773
alert_id: 13135
events: 1
created_at: 2026-10-29T12:41:58Z
message: Ip 118.33.119.34 performed 'crowdsecurity/http-cve-2021-41773' (1 events over 0s) at 2026-10-29 12:41:57.408266601 +0000 UTC
target_uri: ["/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"]
method: ["POST"]
status: ["400"]
user_agent: ["libredtail-http"]
show less
2026-10-29T14:30:39.420274+02:00 irc.chewbakka.ch sshd[3204650]: Invalid user panxiaolu from 165.154 ...
show more2026-10-29T14:30:39.420274+02:00 irc.chewbakka.ch sshd[3204650]: Invalid user panxiaolu from 165.154.62.190 port 60420
2026-10-29T14:34:54.128983+02:00 irc.chewbakka.ch sshd[3205331]: Invalid user guilherme from 165.154.62.190 port 55586
...
show less
2026-10-29T14:25:16.123429+02:00 irc.chewbakka.ch sshd[3203745]: Invalid user akash from 128.1.198.7 ...
show more2026-10-29T14:25:16.123429+02:00 irc.chewbakka.ch sshd[3203745]: Invalid user akash from 128.1.198.78 port 45588
2026-10-29T14:33:34.790020+02:00 irc.chewbakka.ch sshd[3205103]: Invalid user panxiaolu from 128.1.198.78 port 57066
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 13130
events: 1
created ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 13130
events: 1
created_at: 2026-10-29T12:07:09Z
message: Ip 40.119.27.192 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-10-29 12:07:09.149931114 +0000 UTC
target_uri: ["/developmentserver/metadatauploader"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 zgrab/0.x"]
show less
2026-10-29T06:09:06.713093+02:00 irc.chewbakka.ch sshd[2799591]: Invalid user mc from 82.127.118.117 ...
show more2026-10-29T06:09:06.713093+02:00 irc.chewbakka.ch sshd[2799591]: Invalid user mc from 82.127.118.117 port 57820
2026-10-29T06:12:04.488332+02:00 irc.chewbakka.ch sshd[2800075]: Invalid user john from 82.127.118.117 port 56208
...
show less
2026-10-29T05:57:21.662962+02:00 irc.chewbakka.ch sshd[2797576]: Invalid user admin from 35.233.117. ...
show more2026-10-29T05:57:21.662962+02:00 irc.chewbakka.ch sshd[2797576]: Invalid user admin from 35.233.117.1 port 23366
2026-10-29T05:59:10.965056+02:00 irc.chewbakka.ch sshd[2797851]: Invalid user nicbq from 35.233.117.1 port 37604
...
show less
2026-10-29T03:49:01.174350+02:00 irc.chewbakka.ch sshd[2774320]: Invalid user admin from 185.231.183 ...
show more2026-10-29T03:49:01.174350+02:00 irc.chewbakka.ch sshd[2774320]: Invalid user admin from 185.231.183.151 port 44970
2026-10-29T04:09:32.209093+02:00 irc.chewbakka.ch sshd[2778787]: Invalid user user from 185.231.183.151 port 49396
...
show less
2026-10-29T03:07:35.408657+02:00 irc.chewbakka.ch sshd[2732736]: Invalid user deploy from 185.218.13 ...
show more2026-10-29T03:07:35.408657+02:00 irc.chewbakka.ch sshd[2732736]: Invalid user deploy from 185.218.139.89 port 59146
2026-10-29T03:17:18.517800+02:00 irc.chewbakka.ch sshd[2739432]: Invalid user ftpuser from 185.218.139.89 port 55712
...
show less
2026-10-29T02:51:08.631635+02:00 irc.chewbakka.ch sshd[2730005]: Invalid user user from 43.156.136.4 ...
show more2026-10-29T02:51:08.631635+02:00 irc.chewbakka.ch sshd[2730005]: Invalid user user from 43.156.136.47 port 46370
2026-10-29T02:59:13.195161+02:00 irc.chewbakka.ch sshd[2731322]: Invalid user alex from 43.156.136.47 port 40796
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 13089
events: 11
created_at ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 13089
events: 11
created_at: 2026-10-29T00:36:59Z
message: Ip 180.93.254.108 performed 'crowdsecurity/http-probing' (11 events over 2.600537002s) at 2026-10-29 00:36:59.69387456 +0000 UTC
target_uri: ["//wp-includes/wlwmanifest.xml","//xmlrpc.php?rsd","//blog/wp-includes/wlwmanifest.xml","//web/wp-includes/wlwmanifest.xml","//wordpress/wp-includes/wlwmanifest.xml","//website/wp-includes/wlwmanifest.xml","//wp/wp-includes/wlwmanifest.xml","//news/wp-includes/wlwmanifest.xml","//2020/wp-includes/wlwmanifest.xml","//2019/wp-includes/wlwmanifest.xml","//shop/wp-includes/wlwmanifest.xml"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"]
show less
2026-10-29T02:17:37.714070+02:00 irc.chewbakka.ch sshd[2709667]: Invalid user eowyn from 162.243.72. ...
show more2026-10-29T02:17:37.714070+02:00 irc.chewbakka.ch sshd[2709667]: Invalid user eowyn from 162.243.72.114 port 46088
2026-10-29T02:19:55.988361+02:00 irc.chewbakka.ch sshd[2710050]: Invalid user maja from 162.243.72.114 port 42006
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 13086
events: 11
created_at ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 13086
events: 11
created_at: 2026-10-28T23:48:11Z
message: Ip 194.180.49.41 performed 'crowdsecurity/http-probing' (11 events over 1.464419307s) at 2026-10-28 23:48:11.524547775 +0000 UTC
target_uri: ["/.env","/.env.backup","/.env.bak","/.env.production","/.env.local","/.env.old","/.env.save","/wp-config.php","/wp-config.php.bak","/config.php","/parameters.yml"]
method: ["GET"]
status: ["404"]
user_agent: ["Go-http-client/1.1"]
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-sensitive-files
alert_id: 13079
events: 5
cre ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-sensitive-files
alert_id: 13079
events: 5
created_at: 2026-10-28T22:38:51Z
message: Ip 161.97.77.98 performed 'crowdsecurity/http-sensitive-files' (5 events over 499.916092ms) at 2026-10-28 22:38:50.439629365 +0000 UTC
target_uri: ["/.env","/.env.bak","/.env.backup","/app/.env","/src/.env"]
method: ["GET"]
status: ["404","301"]
user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"]
show less
2026-10-28T20:08:22.393430+02:00 irc.chewbakka.ch sshd[2571790]: Invalid user david from 24.106.43.2 ...
show more2026-10-28T20:08:22.393430+02:00 irc.chewbakka.ch sshd[2571790]: Invalid user david from 24.106.43.27 port 46080
2026-10-28T20:15:11.858155+02:00 irc.chewbakka.ch sshd[2573074]: Invalid user proxyuser from 24.106.43.27 port 49496
...
show less
2026-10-28T18:45:59.842023+02:00 irc.chewbakka.ch sshd[2378506]: Invalid user squid from 27.79.5.133 ...
show more2026-10-28T18:45:59.842023+02:00 irc.chewbakka.ch sshd[2378506]: Invalid user squid from 27.79.5.133 port 57144
2026-10-28T18:46:16.553047+02:00 irc.chewbakka.ch sshd[2378531]: Invalid user system from 27.79.5.133 port 57152
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-crawl-non_statics
alert_id: 13036
events: 49
...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-crawl-non_statics
alert_id: 13036
events: 49
created_at: 2026-10-28T14:04:08Z
message: Ip 181.215.186.252 performed 'crowdsecurity/http-crawl-non_statics' (49 events over 9.79758201s) at 2026-10-28 14:04:07.723927963 +0000 UTC
target_uri: ["/.svn/wc.db","/.svn/format","/.hg/reconx-34329ba2c732","/.hg/hgrc","/.hg/requires","/api/v1/version"]
method: ["GET"]
status: ["404","301"]
user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
show less
2026-10-28T15:16:01.568599+02:00 irc.chewbakka.ch sshd[2291662]: Invalid user proxyuser from 167.179 ...
show more2026-10-28T15:16:01.568599+02:00 irc.chewbakka.ch sshd[2291662]: Invalid user proxyuser from 167.179.17.252 port 58430
2026-10-28T15:21:32.446473+02:00 irc.chewbakka.ch sshd[2292711]: Invalid user deploy from 167.179.17.252 port 48190
...
show less
2026-10-28T13:09:45.625119+02:00 irc.chewbakka.ch sshd[2120895]: Invalid user zhao from 82.157.7.121 ...
show more2026-10-28T13:09:45.625119+02:00 irc.chewbakka.ch sshd[2120895]: Invalid user zhao from 82.157.7.121 port 57840
2026-10-28T13:24:10.359067+02:00 irc.chewbakka.ch sshd[2123434]: Invalid user telephone from 82.157.7.121 port 32994
...
show less
2026-10-28T11:54:49.216941+02:00 irc.chewbakka.ch sshd[2095618]: Invalid user sutai from 179.43.153. ...
show more2026-10-28T11:54:49.216941+02:00 irc.chewbakka.ch sshd[2095618]: Invalid user sutai from 179.43.153.18 port 42116
2026-10-28T11:56:55.823066+02:00 irc.chewbakka.ch sshd[2095982]: Invalid user mapr from 179.43.153.18 port 32894
...
show less
2026-10-28T09:57:09.764155+02:00 irc.chewbakka.ch sshd[1886154]: Invalid user nmrsu from 196.191.76. ...
show more2026-10-28T09:57:09.764155+02:00 irc.chewbakka.ch sshd[1886154]: Invalid user nmrsu from 196.191.76.122 port 58254
2026-10-28T09:59:13.605851+02:00 irc.chewbakka.ch sshd[1886538]: Invalid user parketadmin from 196.191.76.122 port 50492
...
show less
2026-10-28T09:58:06.441593+02:00 irc.chewbakka.ch sshd[1886330]: Invalid user test from 27.79.5.146 ...
show more2026-10-28T09:58:06.441593+02:00 irc.chewbakka.ch sshd[1886330]: Invalid user test from 27.79.5.146 port 48932
2026-10-28T09:58:31.632242+02:00 irc.chewbakka.ch sshd[1886385]: Invalid user config from 27.79.5.146 port 45496
...
show less
Brute-ForceSSH
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.